...o sample use cases on the Internet or in the Security Essentials application on Splunk." but I don't know how to do this task. He gives us an empty Splunk Server and this task. How can I create a u...
...ossible permutation of tasks for every phishing investigation. Some real-time task modification may be required to adapt to unforeseen circumstances in the case. That’s why we created “m...
View our Tech Talk: Security Edition, An AWSome Use Case for SplunkPhantom: Tackling AWS Security Automation on demand.
As organizations push an ever increasing a...
Team,
I am looking for a way to generate a summary report on cases that we have inPhantom ? Which will include case ID, case name, Assignee, Start data, end date , status etc.
I dont find an o...
...indows servers, or vSphere servers. See Using the REST API reference for SplunkPhantom for more information. To create as asset inSplunkPhantom using the REST API, post a JSON object to a specific U...
...uthor rules to automate security actions.
Incident Commander: Incident Commanders are allowed to view/edit Events and are allowed to create new Actions.
The Automation Engineer and the Incident C...
Does anyone know where I can find some already created Splunk use cases for github webhook logs?
I am having a really hard time googling for a dump of github based splunk searches because of the k...
Is it possible to run a playbook on demand, meaning a manual trigger by an analyst such as clicking a playbook during a workbook step? I have a use case where I want to run a playbook, but only f...